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AMENDMENT TO THE CLAIMS 
Please amend the presently pending claims as follows: 

1. (Currently Amended) Risk management software embodied upon a computer-readable 
medium, the software comprising a set of instructions for the following steps to be performed 
when the software is executed: 

a) accessing project data comprising a plurality of action identifiers, each of which 
identifies a separate action to be performed; 

b) analysing the project data to identify a plurality of activities linked to at least one of 
the actions, wherein to at least some of the plurality of activities is assigned at least 
one risk indicator, the at least one risk indicator identifying an impact consequences 
of a risk on the activity; 

c) on the basis of one or more mitigating tasks identified to reduce or prevent the 
risk or the consequences of the risk, outputting to the project data one or more 
new action identifiers or alterations to existing action identifiers in the project 
data; and 

d) accessing changes to the project data and revising the plurality of activities in 
dependence on whether the changes are to action identifiers in the project data 
resulting from step c)above. 

2. (Previously Presented) Risk management software as claimed in claim 1, wherein the 
changes to the project data are compared with new action identifiers or alterations to existing 
action identifiers previously output to the project data and where the changes to project data 
relate to action identifiers previously output to the project data no revisions are made to the 
plurality of activities. 

3. (Original) Risk management software as claimed in claim 1, comprising the step of receiving 
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a trigger from the project data when the project data has been changed. 

4. (Original) Risk management software as claimed in claim 1, comprising the step of 
periodically polling the project data to determine whether changes have been made to the project 
data. 

5. (Original) Risk management software as claimed in claim 1, comprising the further step of 
automatically outputting a message to one or more predetermined recipients. 

6. (Previously Presented) Risk management software as claimed in claim 5, comprising the 
further step of automatically outputting a message to one or more predetermined recipients when 
the consequences of the risk are identified as exceeding a selected threshold. 

7. (Original) Risk management software as claimed in claim 5, wherein the message is 
automatically output when the processor receives notice of an impacted risk. 

8. (Previously Presented) Risk management software as claimed in claim 1, wherein the risk 
indicator comprises one or more of a cost allowance and a time allowance. 

9. (Currently Amended) Risk management apparatus comprising a risk processor; means for 
linking the risk processor to a risk data store; a project data interface for linking the risk 
processor to a second store containing project data; and a program store containing a set of 
instructions for performing the following functions: 

a) accessing project data in the second store, the project data comprising a plurality 
of action identifiers, each of which identifies a separate action to be performed; 

b) analysing the project data to identify a plurality of activities linked to at least one 
of the actions, wherein to at least some of the plurality of activities is assigned at 
least one risk indicator, the at least one risk indicator identifjdng the impact 
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consequences of a risk on the activity^ and storing the plurality of activities in the 
risk data store; 

c) on the basis of one or more mitigating tasks identified to reduce or prevent the 
risk or the consequences of the risk, outputting to the second store one or more 
new action identifiers or alterations to existing action identifiers in the project 
data; and 

d) accessing changes to the project data and revising the plurality of activities stored 
in the risk data store in dependence on whether the changes are to action 
identifiers in the project data resulting from step c) above. 

10. (Original) Risk management apparatus as claimed in claim 9, wherein the risk data store and 
the second store utilise the same database. 

11. (Original) Risk management apparatus as claimed in claim 9, further comprising a network 
interface for connecting to the second store when located at a remote site. 

12. (Original) Risk management apparatus as claimed in claim 9, wherein the functionality of 
the apparatus is divided into at least three parts: a presentational part for managing the 
presentation of risk information to a user of the apparatus; a logic part for analysing the project 
data and for generating and updating the contents of the risk data store; 

and an interface part for enabling communication of the apparatus with external applications and 
wherein the presentational part and the interface part are restricted to only interfacing internally 
with the logic part. 

13. (Previously Presented) Risk management apparatus as claimed in claim 12, wherein the 
apparatus includes a fourth part comprising a risk data store interface which is permitted to 
interface with both the logic part and the interface part. 
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14. (Currently Amended) A risk management method for storing and updating risk 
information, comprising the steps of: 

a) accessing project data comprising a plurality of action identifiers, each of which 
identifies a separate action to be performed; 

b) analysing the project data to identify a plurality of activities linked to at least one 
of the actions, wherein to at least some of the plurality of activities is assigned at 
least one risk indicator, the at least one risk indicator identifjdng the impact a 
consequence of a risk on the activity; 

c) on the basis of one or more mitigating tasks identified to reduce or prevent the 
risk or the consequences of the risk, outputting to the project data one or more 
new action identifiers or alterations to existing action identifiers in the project 
data; and 

(d) accessing changes to the project data and revising the plurality of activities in 
dependence upon whether the changes are to action identifiers in the project data 
resulting from the step (c) above. 

15. (Currently Amended) Integrated project management and risk management apparatus 
comprising: 

a project data store containing a plurality of inter-related action identifiers, each of which 
identifies a separate project action; 

a risk data store containing a plurality of inter-related project activities related to said 
project actions, and a plurality of risk indicators associated with said project activities, each risk 
indicator identifying the impact a consequence of a risk on the activity; and 

a risk processor in communication with said project data store and said risk data store, 
said risk processor being operable to: 

read project action identifiers from said project data store; 

read project activities and associated risk indicators from said risk data store; 

generate and write to said risk data store changes to said project activities and risk 
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indicators to reflect the project action identifiers read from the project data store; 

generate or receive, and write to said risk data store, one or more mitigating activities 
identified to reduce or prevent the risk or the consequences of the risk associated with a project 
activity; and 

generate and write to the project data store one or more new project action identifiers, or 
alterations to existing project action identifiers, corresponding to the mitigating activities 
generated or received. 

16. (Original) The apparatus of claim 15 wherein the risk processor is operable to identify and 
thereby not to further process changes in the project data which were generated by the risk 
processor. 

17. (Currently Amended) A method of operating an integrated project management and risk 
management apparatus comprising a project data store containing a plurality of inter-related 
action identifiers, each of which identifies a separate project action, a risk data store containing a 
plurality of inter-related project activities related to said project actions and a plurality of risk 
indicators associated with said project activities, each risk indicator identifying the impact a 
consequence of a risk on the activity, and a risk processor in communication with said project 
data store and said risk data store, the method comprising the steps of operating said risk 
processor to: 

read project action identifiers from said project data store; 

read project activities and associated risk indicators from said risk data store; 

generate and write to said risk data store changes to said project activities and risk 
indicators to reflect the project action identifiers read from the project data store; 

generate or receive, and write to said risk data store, one or more mitigating activities 
identified to reduce or prevent the risk or the consequences of the risk associated with a project 
activity; and 

generate and write to the project data store one or more new project action identifiers, or 
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alterations to existing project action identifiers, corresponding to the mitigating activities 
generated or received. 

18. (Currently Amended) A computer program product embodied on a computer-readable 
medium, the program product being for use in an integrated project management and risk 
management apparatus, and comprising: 

a project data store containing a plurality of inter-related action identifiers, each of which 
identifies a separate project action; 

a risk data store containing a plurality of project activities related to said project actions 
and a plurality of risk indicators associated with said project activities, each risk indicator 
identifying the impact a consequence of a risk on the activity; 

and a risk processor in communication with said project data store and said risk data 
store, said computer program product comprising computer program instructions which, when 
executed by said risk processor, carry out the method steps of claim 18. 



